Date: Thu, 27 Oct 94 04:30:18 PDT 

From: Ham-Digital Mailing List and Newsgroup <ham-digital@ucsd.edu> 
Errors-To: Ham-Digital-Errors@UCSD.Edu 

Reply-To: Ham-Digital@UCSD.Edu 

Precedence: List 

Subject: Ham-Digital Digest V94 #356 

To: Ham-Digital 


Ham-Digital Digest Thu, 27 Oct 94 Volume 94 : Issue 356 


Today's Topics: 
JNOS and KPC Data Engine? 
using passwords over packet 


Send Replies or notes for publication to: <Ham-Digital@UCSD.Edu> 
Send subscription requests to: <Ham-Digital-REQUEST@UCSD.Edu> 
Problems you can't solve otherwise to brian@ucsd.edu. 


Archives of past issues of the Ham-Digital Digest are available 
(by FTP only) from UCSD.Edu in directory "mailarchives/ham-digital". 


We trust that readers are intelligent enough to realize that all text 
herein consists of personal comments and does not represent the official 
policies or positions of any party. Your mileage may vary. So there. 


Date: 26 Oct 94 21:57:00 GMT 
From: steve.diggs@totrbbs.atl.ga.us (Steve Diggs) 
Subject: JNOS and KPC Data Engine? 


I just inherited a KPC "Data Engine" TNC, complete with 1200 and 9600 
modems. This unit will be placed into service as part of the East 
Atlanta LAN. Seems I've heard that there is an PROM build of JNOS that 
can be loaded into this TNC. 


Anyone got any experience with this approach? 
Thanks, 


Steve Diggs 
East Atlanta LAN 


<<<>>> 
Top Of The Rock BBS - Lilburn, GA SYSOP: Steve Diggs 
UUCP: totrbbs.atl.ga.us Snailmail: 4181 Wash Lee Ct. 


Phone: +1 404 921 8687 Lilburn, GA 30247-7407 


Date: Wed, 26 Oct 94 09:49:58 EDT 
From: rapp@lmr.mv.com (Larry Rappaport) 
Subject: using passwords over packet 


CASSIDY@saturn.rowan.edu (Kyle Cassidy) writes: 


i'm considering setting up a packet/internet gateway at my site, but i'm 
concerned by the apparant lack of security. (i.e. if a user wants to read his 
mail over the airwaves where anybody is listening, i don't have a problem wit 
that, but i don't want anybody who is listening to then be able to log on as 
that user....) what i would like to know is: 


VVVVV VV 


1) is there a way to use non-echoed passwords over packet? 


You could use the same system that is used in X1J and other nodes which have 
a sysop command. Basically there is a LONG string entered as a password in 
the software, which is also known by the user. When the user logs on, the bbs 
would send a random series of numbers - say five. The user sends back the 
characters pointed to by those numbers. If you change the password 
regularly, it should provide sufficient security. 


> and 

> 

> 2) is it legal? 
> 


> does using a non-reflected password violate the FCC rule against sending code 
> messages? my feeling is that it is, but closed repeaters are allowed to use 
> "secret codes" which are similar in many ways to passwords. 


IANAL (thank God!); I don't know. However, this is what is being used on 
TheNet, X1J and other systems right now, so it probably is legal. 


73, Larry W1HJF 


L. M. Rappaport & Associates, Inc. rapp@lmr.mv.com voice +1 603 237 8400 
Colebrook, NH 03576-0158 CIS 72427 ,2567 fax +1 603 237 8430 
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